Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/03c59c-d257-48ac-ba33-b0eead7c2488/1/Nr5pfISJ9IIiD1xAZLq-TIPEGdY.mft
File: Nr5pfISJ9IIiD1xAZLq-TIPEGdY.mft (raw, json)
Hash identifier: VOdkRSHQPVbOssTDc4q7GsIf0/ympexSnWSCpY5uDIo=
Subject key identifier: 83:E0:14:47:AB:AB:93:1E:52:8A:24:A4:09:76:4F:83:29:34:4D:33
Authority key identifier: 36:BE:69:7C:84:89:F4:82:22:0F:5C:40:64:BA:BE:4C:83:C4:19:D6
Certificate issuer: /CN=36be697c8489f482220f5c4064babe4c83c419d6
Certificate serial: 01A16269C388129E307BB35EFF85FC130BE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nr5pfISJ9IIiD1xAZLq-TIPEGdY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/03c59c-d257-48ac-ba33-b0eead7c2488/1/Nr5pfISJ9IIiD1xAZLq-TIPEGdY.mft
Manifest number: 0F46
Signing time: Thu 22 Oct 2026 07:01:00 +0000
Manifest this update: Thu 22 Oct 2026 07:01:00 +0000
Manifest next update: Fri 23 Oct 2026 07:01:00 +0000
Files and hashes: 1: Nr5pfISJ9IIiD1xAZLq-TIPEGdY.crl (hash: v6nnePtSHpKs80oxHKcxvxRTerBvDYbJQdhHXIQumkg=)
2: V7ehPHGc-IPjCptiIqNGOp1gBiE.roa (hash: J/1jCxZxkRbRLNpc2zFMuakcbWm535PWrbp1jxC/YvM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/03c59c-d257-48ac-ba33-b0eead7c2488/1/Nr5pfISJ9IIiD1xAZLq-TIPEGdY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/03c59c-d257-48ac-ba33-b0eead7c2488/1/Nr5pfISJ9IIiD1xAZLq-TIPEGdY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nr5pfISJ9IIiD1xAZLq-TIPEGdY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 07:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:62:69:c3:88:12:9e:30:7b:b3:5e:ff:85:fc:13:0b:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36be697c8489f482220f5c4064babe4c83c419d6
Validity
Not Before: Oct 22 07:01:00 2026 GMT
Not After : Oct 23 07:01:00 2026 GMT
Subject: CN=83e01447abab931e528a24a409764f8329344d33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:1e:e8:3d:b1:31:4c:de:4d:6c:78:4d:5d:bc:
ea:9f:79:c9:a7:25:d0:08:8c:44:66:33:5a:08:98:
cb:c1:85:43:9c:ea:b3:67:b0:9a:9e:18:c5:4d:50:
a4:d8:c5:5e:55:41:75:09:87:15:27:48:d2:40:6d:
66:4a:1a:5f:2d:a6:50:46:b5:0c:90:39:76:56:eb:
ff:7a:af:65:ef:60:e2:1d:35:dd:f8:b0:50:03:87:
f3:45:ac:f3:64:60:f1:42:2a:2a:36:c4:b4:d7:6f:
3a:81:b5:7d:76:0d:68:82:c0:e4:2f:e8:17:e1:ba:
d2:39:29:91:fb:33:2b:e8:19:05:3e:97:11:d4:b6:
bc:0e:66:19:8f:54:2e:b5:0b:ae:9c:d3:53:8e:9f:
65:b0:50:46:88:8d:fb:37:02:71:ca:86:20:fd:e3:
73:3f:c6:83:1e:1e:69:34:74:c2:cf:2b:83:37:40:
ec:46:f9:d7:78:dc:14:18:c4:7f:58:18:0f:0f:2f:
d1:07:ba:1f:ec:e5:52:be:cf:f0:df:19:34:f1:b0:
1a:6e:6b:77:28:7a:36:8c:71:c0:4e:ec:75:7c:da:
34:2f:26:74:14:73:6e:eb:00:44:3a:b2:d5:3c:cd:
a6:6e:2a:ee:78:b9:bf:c6:8e:9d:85:f8:02:81:e0:
fd:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:E0:14:47:AB:AB:93:1E:52:8A:24:A4:09:76:4F:83:29:34:4D:33
X509v3 Authority Key Identifier:
keyid:36:BE:69:7C:84:89:F4:82:22:0F:5C:40:64:BA:BE:4C:83:C4:19:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nr5pfISJ9IIiD1xAZLq-TIPEGdY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/03c59c-d257-48ac-ba33-b0eead7c2488/1/Nr5pfISJ9IIiD1xAZLq-TIPEGdY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/03c59c-d257-48ac-ba33-b0eead7c2488/1/Nr5pfISJ9IIiD1xAZLq-TIPEGdY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:54:a2:48:b9:95:d3:d7:1d:78:70:9f:96:40:6c:9b:4e:ce:
59:b7:b9:ac:03:fa:16:cf:bb:6c:2c:75:8e:c1:f8:f2:85:a8:
78:a2:a8:0c:3b:44:84:93:3e:39:00:2d:2c:62:b2:6c:6a:77:
d5:03:e2:32:91:db:35:36:5e:1c:a4:dc:80:2d:ce:1d:34:9e:
71:5b:e9:93:18:04:e5:b3:d2:1f:49:38:d8:8a:0a:d0:94:54:
6a:64:df:be:f6:55:66:a7:89:d6:cc:90:80:29:80:be:48:19:
9c:d3:3a:bc:cb:4d:79:b2:7d:43:e2:bd:77:2a:a4:56:d7:55:
c0:e5:68:4b:14:2a:ac:b2:73:e7:63:8f:5b:8c:d7:91:53:7a:
2e:2c:5e:b3:3e:25:1a:24:79:54:71:97:5e:47:b1:65:d8:ec:
d3:2b:86:6c:72:f3:22:98:7f:59:eb:5e:33:28:b2:b7:fe:34:
cc:c4:b2:39:ba:c0:4e:fa:24:b8:9c:33:09:37:b6:eb:a8:22:
86:88:4d:f4:a3:d2:ee:69:e4:61:7f:01:8a:a9:b9:16:7d:f5:
d9:81:aa:cb:fa:a7:5b:ee:30:bc:e1:50:fc:55:1f:7a:89:64:
3c:82:93:5f:3a:1e:19:00:91:62:d3:61:2f:1a:6c:9a:2b:40:
c9:9c:fb:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFiacOIEp4we7Ne/4X8EwvkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2YmU2OTdjODQ4OWY0ODIyMjBmNWM0MDY0YmFiZTRjODNj
NDE5ZDYwHhcNMjYxMDIyMDcwMTAwWhcNMjYxMDIzMDcwMTAwWjAzMTEwLwYDVQQD
Eyg4M2UwMTQ0N2FiYWI5MzFlNTI4YTI0YTQwOTc2NGY4MzI5MzQ0ZDMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7B7oPbExTN5NbHhNXbzqn3nJpyXQ
CIxEZjNaCJjLwYVDnOqzZ7CanhjFTVCk2MVeVUF1CYcVJ0jSQG1mShpfLaZQRrUM
kDl2Vuv/eq9l72DiHTXd+LBQA4fzRazzZGDxQioqNsS01286gbV9dg1ogsDkL+gX
4brSOSmR+zMr6BkFPpcR1La8DmYZj1QutQuunNNTjp9lsFBGiI37NwJxyoYg/eNz
P8aDHh5pNHTCzyuDN0DsRvnXeNwUGMR/WBgPDy/RB7of7OVSvs/w3xk08bAabmt3
KHo2jHHATux1fNo0LyZ0FHNu6wBEOrLVPM2mbirueLm/xo6dhfgCgeD95wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIPgFEerq5MeUookpAl2T4MpNE0zMB8GA1UdIwQY
MBaAFDa+aXyEifSCIg9cQGS6vkyDxBnWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnI1cGZJU0o5SUlpRDF4QVpMcS1USVBFR2RZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8wM2M1OWMtZDI1Ny00OGFjLWJhMzMt
YjBlZWFkN2MyNDg4LzEvTnI1cGZJU0o5SUlpRDF4QVpMcS1USVBFR2RZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy8wM2M1OWMtZDI1Ny00OGFjLWJhMzMtYjBlZWFkN2MyNDg4
LzEvTnI1cGZJU0o5SUlpRDF4QVpMcS1USVBFR2RZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUlSiSLmV
09cdeHCflkBsm07OWbe5rAP6Fs+7bCx1jsH48oWoeKKoDDtEhJM+OQAtLGKybGp3
1QPiMpHbNTZeHKTcgC3OHTSecVvpkxgE5bPSH0k42IoK0JRUamTfvvZVZqeJ1syQ
gCmAvkgZnNM6vMtNebJ9Q+K9dyqkVtdVwOVoSxQqrLJz52OPW4zXkVN6Lixesz4l
GiR5VHGXXkexZdjs0yuGbHLzIph/WeteMyiyt/40zMSyObrATvokuJwzCTe266gi
hohN9KPS7mnkYX8Biqm5Fn312YGqy/qnW+4wvOFQ/FUfeolkPIKTXzoeGQCRYtNh
LxpsmitAyZz7ig==
-----END CERTIFICATE-----
Generated at Thu Oct 22 16:41:34 2026 by rpki-client